Lyrics Card Generator v5.2.3 Release Notes
Release verification fix
v5.2.3 fixes the final release-asset re-download verification failure in the v5.2.2 publishing flow.
- When a published release and a draft release share a tag, the workflow no longer downloads assets through a tag that may resolve to the wrong release.
- The workflow records the unique draft release ID it created and uses that ID to download, verify, and publish the same asset set.
- Before publishing, it strictly verifies Setup, portable, SPDX SBOM, SHA256SUMS, file digests, and GitHub attestations.
- An existing published release for the tag blocks the workflow early; reruns remove only stale drafts with the same tag so duplicate or incomplete releases cannot appear successful.
Release scope
- App features, interface behavior, lyric-card output, and project data formats are unchanged from v5.2.2.
- This release only repairs release and supply-chain verification and regenerates fully verified Windows artifacts.